cbcvebase.
CVE-2015-5214
published 2015-11-10

CVE-2015-5214: LibreOffice before 4.4.6 and 5.x before 5.0.1 and Apache OpenOffice before 4.1.2 allows remote attackers to cause a denial of service (memory corruption and…

medium6.8CVSS 3.1
AVNACMAuNCPIPAP
LibreOffice before 4.4.6 and 5.x before 5.0.1 and Apache OpenOffice before 4.1.2 allows remote attackers to cause a denial of service (memory corruption and application crash) or execute arbitrary code via an index to a non-existent bookmark in a DOC file.

Affected

13 ranges
VendorProductVersion rangeFixed in
apacheopenoffice<= 4.1.1
canonicalubuntu_linux
canonicalubuntu_linux
canonicalubuntu_linux
debiandebian_linux
debiandebian_linux
debianlibreoffice< libreoffice 1:5.0.1~rc2-1 (bookworm)libreoffice 1:5.0.1~rc2-1 (bookworm)
libreofficelibreoffice<= 4.4.5
libreofficelibreoffice>= 0 < 1:5.0.1~rc2-11:5.0.1~rc2-1
libreofficelibreoffice>= 0 < 1:5.0.1~rc2-11:5.0.1~rc2-1
libreofficelibreoffice>= 0 < 1:5.0.1~rc2-11:5.0.1~rc2-1
libreofficelibreoffice>= 0 < 1:5.0.1~rc2-11:5.0.1~rc2-1
libreofficelibreoffice>= 0 < 1:4.2.8-0ubuntu31:4.2.8-0ubuntu3

CVSS provenance

nvd6.8MEDIUMAV:N/AC:M/Au:N/C:P/I:P/A:P
osv6.8MEDIUM